98 matches found
PT-2025-48072
Primakon Pi Portal 1.0.18 /api/v2/pp users endpoint fails to adequately check user permissions before processing a PATCH request to modify the PP SECURITY PROFILE ID. Because of weak access controls any low level user can use this API and change their permission to Administrator by using PP...
CVE-2025-64064
CVE-2025-64064 affects Primakon Pi Portal 1.0.18 via the /api/v2/pp_users endpoint. A PATCH request that modifies PP_SECURITY_PROFILE_ID can bypass permissions checks, allowing a low-privilege user to elevate to Administrator. Core issue is weak access control around the PP_SECURITY_PROFILE_ID pa...
EUVD-2019-1106
Malware in sbrugna...
EUVD-2021-10118
Malware in sbrugna...
EUVD-2016-6913
Malware in sbrugna...
EUVD-2020-20217
Malware in sbrugna...
EUVD-2022-37307
Malicious code in bioql PyPI...
EUVD-2025-24640
Malicious code in bioql PyPI...
CVE-2025-59589
creationtimestamp| type| source ---|---|--- 2025-09-22 22:18:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lzhgt3ippg2g...
CVE-2025-53771
creationtimestamp| type| source ---|---|--- 2025-07-20 06:03:24+00:00| seen| https://vulnerability.circl.lu/bundle/7eb6b389-20dd-404f-90c4-314ed370fcc5 2025-07-21 02:16:35+00:00| seen| https://bsky.app/profile/threatintel.microsoft.com/post/3lugwccoukc2q 2025-07-21 02:31:17+00:00| seen|...
CVE-2025-41668
A low privileged remote attacker with file access can replace a critical file or folder used by the service security-profile to get read, write and execute access to any file on the device...
CVE-2025-41668
A low privileged remote attacker with file access can replace a critical file or folder used by the service security-profile to get read, write and execute access to any file on the device...
CVE-2025-41668 Phoenix Contact: File access due to the replacement of a critical file used by the service security-profile
A low privileged remote attacker with file access can replace a critical file or folder used by the service security-profile to get read, write and execute access to any file on the device...
CVE-2025-41668 Phoenix Contact: File access due to the replacement of a critical file used by the service security-profile
A low privileged remote attacker with file access can replace a critical file or folder used by the service security-profile to get read, write and execute access to any file on the device...
CVE-2025-53384
creationtimestamp| type| source ---|---|--- 2025-06-28 05:06:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsnf2yvt6v2a...
CVE-2025-5106
creationtimestamp| type| source ---|---|--- 2025-05-23 16:15:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lptzobiysv2w...
CVE-2022-34352
IBM QRadar SIEM 7.5.0 is vulnerable to information exposure allowing a delegated Admin tenant user with a specific domain security profile assigned to see data from other domains. IBM X-Force ID: 230403...
CVE-2022-34351
IBM QRadar SIEM 7.4 and 7.5 is vulnerable to information exposure allowing a non-tenant user with a specific domain security profile assigned to see some data from other domains. IBM X-Force ID: 230402...
CVE-2021-23000
On BIG-IP versions 13.1.3.4-13.1.3.6 and 12.1.5.2, if the tmm.http.rfc.enforcement BigDB key is enabled in a BIG-IP system, or the Bad host header value is checked in the AFM HTTP security profile associated with a virtual server, in rare instances, a specific sequence of malicious requests may...